Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b607607e-c78d-3e8a-af45-b7d35eb3713c.roa
File:                     b607607e-c78d-3e8a-af45-b7d35eb3713c.roa (raw, json)
Hash identifier:          VReMOVxOXp6xplEULgpa6Bp+KGG0tnnVXv1K3alY3G0=
Subject key identifier:   4F:CC:21:3C:48:8F:81:0B:FE:77:09:FF:1D:22:4D:89:27:47:9D:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B0670C0C1CEF8C6E5F340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b607607e-c78d-3e8a-af45-b7d35eb3713c.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        204.178.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:06:70:c0:c1:ce:f8:c6:e5:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b9301d63-8596-47e5-909f-567bdc11a223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:74:09:e8:b8:b3:90:4e:2d:1c:f1:08:71:
                    d0:b1:52:df:df:38:3c:59:c5:d7:fd:04:67:3c:29:
                    b7:03:22:d3:9a:38:2b:09:3c:ac:ba:b2:f5:bc:80:
                    9f:df:7f:32:66:d1:33:d5:13:54:28:ad:d2:1d:6c:
                    9a:7e:e1:19:db:7d:42:16:51:32:34:1b:41:f3:21:
                    df:57:b9:02:35:f4:73:fc:5b:0a:4b:de:2c:ce:16:
                    61:61:56:ab:4d:d7:d2:08:00:2e:02:e4:f8:7a:86:
                    08:00:a9:c6:89:d5:e1:05:1e:ae:25:f7:c1:ad:35:
                    59:49:af:9f:96:20:c5:6d:c8:76:47:7a:e9:98:91:
                    ea:91:d1:92:41:7b:55:26:3f:39:8e:03:91:49:62:
                    30:a7:58:3c:c5:56:05:9b:d5:90:07:32:8b:35:9f:
                    c7:42:4c:28:12:2a:40:7d:76:d4:2d:df:22:37:b0:
                    09:b1:36:61:2a:a4:6c:74:31:4d:50:bc:8d:9d:93:
                    2f:95:f7:62:35:53:8e:1d:5f:f6:a2:6e:a4:03:bf:
                    57:1c:67:5c:40:99:aa:af:64:46:a2:70:1f:76:a2:
                    00:1c:f2:a5:e7:a5:b0:6f:ff:5b:8b:f6:e2:84:9c:
                    cc:6e:36:e9:1d:34:fd:b8:26:46:59:cf:64:9b:2d:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:21:3C:48:8F:81:0B:FE:77:09:FF:1D:22:4D:89:27:47:9D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b607607e-c78d-3e8a-af45-b7d35eb3713c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.178.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c5:e6:e0:b8:4d:57:de:ee:d3:52:c2:6b:ec:e9:8e:6d:ef:
         a6:55:03:38:97:f8:6a:fd:66:bb:14:bd:cf:76:6d:2a:28:d1:
         d5:d7:6a:b1:e4:fd:9a:28:02:a8:9a:31:76:c8:6b:f5:18:6e:
         ee:73:b6:35:ba:3d:d5:22:cd:c6:58:ea:89:88:7d:4c:ed:d8:
         4d:2e:bb:f5:b2:79:1e:1d:d5:e5:84:69:43:19:46:51:38:83:
         11:36:6d:a7:fd:31:18:6e:a7:e3:0d:8d:05:31:41:a3:c2:d2:
         de:83:33:01:50:15:97:99:ce:d8:2e:2d:ba:3e:a1:26:a5:66:
         fa:20:38:88:2f:c2:21:09:dd:28:51:21:2d:54:10:7c:85:21:
         3f:8e:fe:78:ce:76:3e:54:ed:bc:3f:74:64:4c:74:c7:3e:09:
         53:ce:52:3a:e5:a4:9a:96:68:a4:7d:c9:50:ce:ed:e8:a9:19:
         e4:b0:8b:df:96:42:d0:cf:8d:b0:a2:73:64:27:fd:d7:e9:64:
         7c:f8:68:71:49:a5:f8:43:2b:6d:75:48:1b:c6:ab:91:48:b7:
         84:88:3a:d3:da:fd:ff:a9:7e:21:9f:2e:3d:07:73:ed:0d:0e:
         48:4c:23:52:d7:a3:ca:a5:0d:02:48:96:a4:40:1c:42:87:3d:
         32:76:39:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewZwwMHO+Mbl80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
YjkzMDFkNjMtODU5Ni00N2U1LTkwOWYtNTY3YmRjMTFhMjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUF0Cei4s5BOLRzxCHHQsVLf3zg8WcXX/QRn
PCm3AyLTmjgrCTysurL1vICf338yZtEz1RNUKK3SHWyafuEZ231CFlEyNBtB8yHf
V7kCNfRz/FsKS94szhZhYVarTdfSCAAuAuT4eoYIAKnGidXhBR6uJffBrTVZSa+f
liDFbch2R3rpmJHqkdGSQXtVJj85jgORSWIwp1g8xVYFm9WQBzKLNZ/HQkwoEipA
fXbULd8iN7AJsTZhKqRsdDFNULyNnZMvlfdiNVOOHV/2om6kA79XHGdcQJmqr2RG
onAfdqIAHPKl56Wwb/9bi/bihJzMbjbpHTT9uCZGWc9kmy1zCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/MITxIj4EL/ncJ/x0iTYknR53LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjYwNzYwN2UtYzc4ZC0z
ZThhLWFmNDUtYjdkMzVlYjM3MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3F5uC4TVfe7tNSwmvs6Y5t76ZVAziX+Gr9ZrsUvc92bSoo0dXXarHk
/ZooAqiaMXbIa/UYbu5ztjW6PdUizcZY6omIfUzt2E0uu/WyeR4d1eWEaUMZRlE4
gxE2baf9MRhup+MNjQUxQaPC0t6DMwFQFZeZztguLbo+oSalZvogOIgvwiEJ3ShR
IS1UEHyFIT+O/njOdj5U7bw/dGRMdMc+CVPOUjrlpJqWaKR9yVDO7eipGeSwi9+W
QtDPjbCic2Qn/dfpZHz4aHFJpfhDK211SBvGq5FIt4SIOtPa/f+pfiGfLj0Hc+0N
DkhMI1LXo8qlDQJIlqRAHEKHPTJ2OSw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:58:53 2025 by rpki-client